On Fri, October 10, 2008 15:00, Malcolm Turnbull wrote:
> Normally you wouldn't want load balanced servers to be in an anctive
> directory domain...
I'm curious why not? The benefits I saw initially are:
1. The people maintaining it can use their normal windows logons, meaning
I don't have to maintain a parallel set of accounts, and the Windows
software people don't have to remember yet more passwords.
2. Access to these systems can be controlled through the normal windows
active directory mechanisms.
In addition to that, apparently when users are connecting from in-house
applications on Windows boxes, it's easy for the windows people to extend
authentication through the Web Service connect to supply authentication
for the database and information services being accessed by the request.
Or so they say. I hadn't thought that would be an issue, and it may not
be in the end still.
And these other two options you gave me (snipped) look clear enough to
implement, *plus* I think you've given me the right search terms for
finding yet more information through Google. Thank you!
--
David Dyer-Bennet, dd-b@xxxxxxxx; http://dd-b.net/
Snapshots: http://dd-b.net/dd-b/SnapshotAlbum/data/
Photos: http://dd-b.net/photography/gallery/
Dragaera: http://dragaera.info
|